Known Exploited Vulnerabilities October 08, 2026 · CISA KEV Catalog

CVE-2016-3081: Apache Struts Command Injection Vulnerability

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Apache CVE-2016-3081
Related: CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Known Exploited Vulnerabilities · Aug 04, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026
CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability Known Exploited Vulnerabilities · May 01, 2025